Cybersecurity course

If you want to take a serious step into the world of cybersecurity, this course is made exactly for you. Here you don't just learn theory — you simulate attacks in real labs, defend systems, respond to incidents, and build a complete SOC infrastructure. From network protocols to cloud security, from Linux administration to the depths of Active Directory, from packet analysis with Wireshark to threat hunting with SIEM and EDR — everything is covered in this course. Through Red Team modules, you learn to think from both the attacker's and the defender's perspective. By the end of the course, you will have hands-on experience with industry tools such as BloodHound, Wazuh, Splunk, Velociraptor, and Metasploit, apply the MITRE ATT&CK framework, and be fully ready to enter the workforce.

The following topics are covered:

• DNS, DHCP, HTTP/S, SSH protocols
• Encryption, TLS, and PKI fundamentals
• VPN and network segmentation
• Linux system administration
• Windows and Active Directory management
• Group Policy (GPO) and LAPS
• Compliance frameworks (ISO 27001, NIST CSF, GDPR)
• EDR/XDR telemetry and threat detection
• Phishing analysis and email security
• Cloud security (AWS and Azure)
• Incident Response (NIST/SANS methodology)
• SOC processes, playbooks, and SOAR fundamentals
• OSINT and reconnaissance methods
• Network attacks (ARP Spoofing, DHCP Starvation, VLAN Hopping)
• Web application attacks (SQLi, XSS, LFI)
• Password attacks and hash cracking
• Privilege escalation (Linux and Windows)

By the end of the course, participants will be able to:

• Analyze network traffic and detect anomalies
• Configure Linux and Windows systems in accordance with security standards
• Manage Active Directory environments and identify attack paths
• Write correlation rules in SIEM systems and perform alert analysis
• Monitor threats and conduct incident triage using EDR/XDR tools
• Perform disk and network forensics and reconstruct attack chains
• Analyze phishing campaigns and extract IOCs
• Apply the MITRE ATT&CK framework to real-world incidents
• Develop Incident Response plans and manage the full process from containment to recovery
• Use tools such as Wazuh, Splunk, BloodHound, Velociraptor, Metasploit, and Burp Suite at a practical level
• Identify and remediate common misconfigurations in AWS and Azure environments
• Independently respond to incidents following SOC playbooks